diagutil
Use the diagutil program for troubleshooting the Bravura Security Password Change Notification Module interceptor. Once executed, it submits real requests to the Password Manager service (idpm ) to process according to the password interceptor service (intcptsvc) configuration file.
This program acts as a real time logging utility to monitor the activities between the interceptor and the Password Manager service (idpm ) on the Bravura Security Fabric server; for example, if an account password is changed, using net user <accountName> <Password> in another command prompt, the activities are displayed in the diagutil prompt until Ctrl+C is used to stop logging.
This program is installed by intcpt.msi or intcpt-64.msi on a Windows transparent password synchronization trigger system and can be found in the following directory:
<Program Files path>\Bravura Security\Password Filter\util\
Usage
diagutil.exe [-l <debug level> ] [ -t <timeout> ] -u <userID> -p <userPassword>
Argument | Description |
|---|---|
-l, --level <N> | The debug level 1-6. The default is 4. |
-t, --timeout <N> | The timeout in seconds to receive diagnostic information. The default is 60 seconds. |
-u, --user <userID> | The user to be diagnosed. |
-p, --password | The user’s password. |
diagutil.exe -u qa1000 -p letmein!
returns:
User account name: qa1000 Checking the password filter Dll system registry setting...passed Checking the password filter Dll if it has been loaded...passed Checking the password filter service if it is running...passed Setting password for user [qa1000]: 2010-02-02 11:15:28.561.2903 - [] psintcpt.dll [388,2172] Info: Logging has been enabled, Log level: 4 2010-02-02 11:15:28.576.5698 - [] psintcpt.dll [388,456] Info: User:[qa1000], entered PasswordFilter, sequential number ( SNO ): 1 2010-02-02 11:15:29.675.4688 - [] psintcpt.dll [388,456] Info: User:[qa1000], SNO: 1, PasswordFilter returned [1] 2010-02-02 11:15:29.717.0218 - [] psintcpt.dll [388,456] Info: User:[qa1000], entered PasswordChangeNotify 2010-02-02 11:15:29.720.6418 - [] psintcpt.dll [388,456] Info: User:[qa1000], PasswordChangeNotify finished 2010-02-02 11:15:29.724.6046 - [] diagutil.exe [3244,452] Info: ***** User:[qa1000]'s password has been reset successfully *****
If the debug level is greater than 4 (default), diagutil returns more detail on how the account falls into which categories.